ZinkSeek.com

By SpideyMan in Browser Hijackers

ZinkSeek.com Image

ZinkSeek.com is a bogus search engine that is a part of a browser-hijacking toolbar. At first sight, ZinkSeek.com may seem to be a legitimate and reliable web page which reminds Google or other well-known search systems. However, in truth, ZinkSeek.com is sponsored by damaging Trojans, browser hijackers and rootkits that may involve ZeroAccess rootkit and Google Redirect Virus. These malware infections can result in annoying search redirecting activity on the hijacked web browser. If any malware threats exist on your computer system, you will get unwillingly taken to ZinkSeek.com and other similar domains full of fake ads. Such websites were produced by fraudsters to seduce web users visiting them and clicking on the ads in order to increase website traffic and earn money. Malware threats connected to ZinkSeek.com will restrict your normal Internet surfing. When you try to look for a term on Google, MSN, Yahoo, Bing or other well-known search engines, at first, you will get the search result links related to your query, but if you click on them, suddenly, they will be changed to fake search results totally unrelated to your query that, in reality, are spam advertisements. To stop diversions to ZinkSeek.com, you need to uninstall all malware infections related to this falsified website and reconfigure your browser settings.

File System Details

ZinkSeek.com may create the following file(s):
# File Name Detections
1. %AppData%[trojan name]toolbarlog.txt
2. %AppData%[trojan name]toolbarstats.dat
3. %Temp%[trojan name]toolbar-manifest.xml
4. %AppData%[trojan name]toolbarcouponsmerchants.xml
5. %AppData%[trojan name]toolbardtx.ini
6. %AppData%[trojan name]toolbarguid.dat
7. %AppData%[trojan name]toolbaruninstallStatIE.dat
8. %AppData%[trojan name]toolbarcouponscategories.xml
9. %AppData%[trojan name]toolbarstat.log
10. %AppData%[trojan name]toolbarpreferences.dat
11. %AppData%[trojan name]toolbaruninstallIE.dat
12. %AppData%[trojan name]toolbarversion.xml
13. %AppData%[trojan name]toolbarcouponsmerchants2.xml

Registry Details

ZinkSeek.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}InprocServer32 "C:PROGRA~1WINDOW~4ToolBar[trojan name]dtx.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes[trojan name]IEHelper.DNSGuard
HKEY_LOCAL_MACHINE\SOFTWARE\Classes[trojan name]IEHelper.DNSGuardCLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} "UrlHelper Class"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}VersionIndependentProgID "[trojan name]IEHelper.UrlHelper"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes[trojan name]IEHelper.DNSGuardCurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar "[trojan name] Toolbar"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}ProgID "[trojan name]IEHelper.UrlHelper.1"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7} "[trojan name] Toolbar"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes[trojan name]IEHelper.DNSGuard.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{99079a25-328f-4bd4-be04-00955acaa0a7} "[trojan name] Toolbar"

Trending

Most Viewed

Loading...